HDFC Asset Management Company Ltd (HDFC AMC) disclosed a cyber-security incident on Monday after receiving communication from an anonymous source claiming access to certain portions of its IT systems. According to Business Standard, the incident occurred on May 16, 2026, following which the company promptly activated containment and incident response protocols and engaged a specialist firm to assess the extent of potential impact. In an updated exchange filing, the company confirmed it detected the cybersecurity incident over the weekend on Saturday and immediately initiated measures designed to isolate and mitigate the potential cyber risk.
While the detailed assessment remains ongoing, HDFC AMC stated that preliminary findings indicate the incident is unlikely to affect business continuity or operations and there does not appear to be any material impact on the company. As reported by Business Standard, the company added that the assessment is still ongoing, though based on initial review, there appears to be no material impact on operations. The disclosure was made as part of regulatory compliance and good governance practices, with the company having also appointed a specialist cybersecurity firm to conduct a detailed assessment and determine the possible impact of the breach.
HDFC AMC shares declined 3.29% to ₹2,614.80 following the cyber-security incident disclosure, according to Business Standard. The incident comes at a time when cyber-security risks are emerging as a growing concern for Indian businesses and financial institutions. Despite the incident, HDFC AMC confirmed that the cyber threat is not expected to affect the continuity of its operations, indicating that investor services, fund management activities and other critical functions remain operational. The company's market performance reflects investor concerns about the cyber-security incident despite management's assurances about business continuity.
The incident highlights the mounting cyber-security challenges facing Indian businesses, with official data showing high-value cyber fraud incidents in India surged more than fourfold in fiscal 2024, leading to losses of about $20 million, as per a report from Reuters. The number of cases involving amounts of ₹1 lakh or more jumped to 29,082 from 6,699 in the previous year, underscoring the rapid escalation in scale. HDFC AMC has not provided details on the nature of the incident, the systems affected, or whether any customer data was compromised.
The incident comes as Union Finance Minister Nirmala Sitharaman urged the Securities and Exchange Board of India to stay exceptionally vigilant against rapidly evolving AI-driven cyber threats. Speaking at SEBI's 38th Foundation Day, Sitharaman warned that a single successful cyber attack on a major exchange, a depository, a clearing corporation or a large broker could disrupt markets on a national scale, erase wealth, and shake public confidence in ways that take years to rebuild. She flagged how artificial intelligence is amplifying cyber risks, noting that AI-led tools are making cyber attacks faster, more adaptive, scalable, and in some cases, more autonomous in execution.
